Thursday, August 4, 2011

Exchange 2010 mailbox server logs event ID: 2937 and 2160 warnings

Problem

You’ve noticed that your Exchange 2010 mailbox server has been consistently logging the following warnings in the application logs:

Event ID: 2937

Process w3wp.exe () (PID=3228). Object [CN=SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9},CN=Users,DC=contoso,DC=com]. Property [HomeMTA] is set to value [contoso.com/Configuration/Deleted Objects/Microsoft MTA
DEL:8c20a5cb-cbb5-4e6d-b6f8-05427d8c4751], it is pointing to the Deleted Objects container in Active Directory. This property should be fixed as soon as possible.

image

Following by:

Event ID: 2160

Process w3wp.exe () (PID=3228). Recipient object CN=SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9},CN=Users,DC=contoso,DC=com read from dc04.contoso.com failed validation and will be excluded from the result set.  Set event logging level for Validation category to Expert to get additional events about each failure.

image

Solution

The reason why the mailbox server is logging these warnings is because there is a problem with user object noted in the warning and in our case, it is the:

SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}

image

If you open up the object’s properties within ADSIedit and scroll down to the homeMDB and homeMTA attribute, you should notice that the value set for the homeMTA attribute DN is pointing to the Deleted Objects location:

image

image

The easy way to obtain the correct value for the attribute is to open up another SystemMailbox object that has the correct value filled in:

image

You’ll also notice that the homeMDB value wasn’t filled out so I went ahead and entered that in as well:

image

No comments: